Change FATAL condition to CRITICAL in trap
- snapon_admin
- Posts: 952
- Joined: Mon Jun 10, 2013 10:39 am
- Location: Kenosha, WI
- Contact:
Change FATAL condition to CRITICAL in trap
I'm trying to pull up the snmptt documentation, but the page on sourceforge appears to be having issues for me. Does anyone know how to have snmptt read a FATAL condition as CRITICAL so that Nagios will recognize the status and update accordingly?
Re: Change FATAL condition to CRITICAL in trap
Its actually quite easy, you just need to change one line in the snmptt.??? something file. For the life of me I just can't recall what file it is. Basically it has all the translated/imported MIBS in it. Search for the OID you want to change in the file if you can figure out which and change what is needed. If I can figure out the correct instructions I'll post again.
2 of XI5.6.14 Prod/DR/DEV - Nagios LogServer 2 Nodes
See my projects on the Exchange at BanditBBS - Also check out my Nagios stuff on my personal page at Bandit's Home and at github
See my projects on the Exchange at BanditBBS - Also check out my Nagios stuff on my personal page at Bandit's Home and at github
- Box293
- Too Basu
- Posts: 5126
- Joined: Sun Feb 07, 2010 10:55 pm
- Location: Deniliquin, Australia
- Contact:
Re: Change FATAL condition to CRITICAL in trap
This post probably has most of the information you are after:
https://support.nagios.com/forum/viewto ... 47#p123119
Basically you can use the incoming data against a MATCH statement which in turn will use the severity defined in the first line of your EVENT.
https://support.nagios.com/forum/viewto ... 47#p123119
Basically you can use the incoming data against a MATCH statement which in turn will use the severity defined in the first line of your EVENT.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
- snapon_admin
- Posts: 952
- Joined: Mon Jun 10, 2013 10:39 am
- Location: Kenosha, WI
- Contact:
Re: Change FATAL condition to CRITICAL in trap
Hmm, yes that does seem promissing. How do I know what exit codes from the MIB I need? I can't see anything that has numbers that correspond to severity in this MIB. Here's the MIB:
Code: Select all
ORACLE-ENTERPRISE-MANAGER-4-MIB DEFINITIONS ::= BEGIN
IMPORTS
TRAP-TYPE
FROM RFC-1215
DisplayString
FROM RFC1213-MIB
OBJECT-TYPE
FROM RFC-1212
enterprises
FROM RFC1155-SMI;
oracle OBJECT IDENTIFIER ::= { enterprises 111 }
oraEM4 OBJECT IDENTIFIER ::= { oracle 15 }
oraEM4Objects OBJECT IDENTIFIER ::= { oraEM4 1 }
oraEM4AlertTable OBJECT-TYPE
SYNTAX SEQUENCE OF OraEM4AlertEntry
ACCESS not-accessible
STATUS mandatory
DESCRIPTION
"Information on alerts generated by Oracle Enterprise Manager. This table is not queryable; it exists only to document the variables included in the oraEM4Alert trap. Each trap contains a single instance of each variable in the table."
::= { oraEM4Objects 1 }
oraEM4AlertEntry OBJECT-TYPE
SYNTAX OraEM4AlertEntry
ACCESS not-accessible
STATUS mandatory
DESCRIPTION
"Information about a particular Oracle Enterprise Manager alert."
INDEX { oraEM4AlertIndex }
::= { oraEM4AlertTable 1 }
OraEM4AlertEntry ::=
SEQUENCE {
oraEM4AlertIndex
INTEGER,
oraEM4AlertTargetName
DisplayString,
oraEM4AlertTargetType
DisplayString,
oraEM4AlertHostName
DisplayString,
oraEM4AlertMetricName
DisplayString,
oraEM4AlertKeyName
DisplayString,
oraEM4AlertKeyValue
DisplayString,
oraEM4AlertTimeStamp
DisplayString,
oraEM4AlertSeverity
DisplayString,
oraEM4AlertMessage
DisplayString,
oraEM4AlertRuleName
DisplayString,
oraEM4AlertRuleOwner
DisplayString,
oraEM4AlertMetricValue
DisplayString,
oraEM4AlertContext
DisplayString,
oraEM4AlertCycleGuid
DisplayString,
oraEM4AlertRepeatCount
DisplayString,
oraEM4AlertUDTargetProperties
DisplayString,
oraEM4AlertAck
DisplayString,
oraEM4AlertAckBy
DisplayString,
oraEM4AlertNotifType
DisplayString,
oraEM4AlertViolationGuid
DisplayString
}
oraEM4AlertIndex OBJECT-TYPE
SYNTAX INTEGER (0..2147483647)
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Index of a particular alert, unique only at the moment an alert is generated."
::= { oraEM4AlertEntry 1 }
oraEM4AlertTargetName OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the target to which this alert applies."
::= { oraEM4AlertEntry 2 }
oraEM4AlertTargetType OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The type of the target to which this alert applies."
::= { oraEM4AlertEntry 3 }
oraEM4AlertHostName OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the host on which this alert originated."
::= { oraEM4AlertEntry 4 }
oraEM4AlertMetricName OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the metric or policy which generated this alert."
::= { oraEM4AlertEntry 5 }
oraEM4AlertKeyName OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the key-column, if present, for the metric which generated this alert."
::= { oraEM4AlertEntry 6 }
oraEM4AlertKeyValue OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The value of the key-column, if present, for the metric which generated this alert."
::= { oraEM4AlertEntry 7 }
oraEM4AlertTimeStamp OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The time at which this alert was generated."
::= { oraEM4AlertEntry 8 }
oraEM4AlertSeverity OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The severity of the alert e.g. Clear, Informational, Warning, Critical, Unreachable Clear, Unreachable Start, Blackout End, Blackout Start, Metric Error Clear, Metric Error Start, Status Pending."
::= { oraEM4AlertEntry 9 }
oraEM4AlertMessage OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The message associated with the alert."
::= { oraEM4AlertEntry 10 }
oraEM4AlertRuleName OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the notification rule that caused this notification."
::= { oraEM4AlertEntry 11 }
oraEM4AlertRuleOwner OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The owner of the notification rule that caused this notification."
::= { oraEM4AlertEntry 12 }
oraEM4AlertMetricValue OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The value of the metric which caused this alert to be generated."
::= { oraEM4AlertEntry 13 }
oraEM4AlertContext OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"A comma separated list of metric column names and values associated with the metric that caused this alert to be generated."
::= { oraEM4AlertEntry 14 }
oraEM4AlertCycleGuid OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"An EM generated identifier that is unique for the lifecyle of an alert."
::= { oraEM4AlertEntry 15 }
oraEM4AlertRepeatCount OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The repeat notification counter for the alert."
::= { oraEM4AlertEntry 16 }
oraEM4AlertUDTargetProperties OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"User-defined target properties associated with the target."
::= { oraEM4AlertEntry 17 }
oraEM4AlertAck OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Acknowledged status flag associated with the alert. 1 indicates acknowledged, 0 indicates unacknowledged."
::= { oraEM4AlertEntry 18 }
oraEM4AlertAckBy OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Acknowledged By value associated with the alert."
::= { oraEM4AlertEntry 19 }
oraEM4AlertNotifType OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Notification Type. 1 - Normal, 4 - Repeat, 9 - Duration"
::= { oraEM4AlertEntry 20 }
oraEM4AlertViolationGuid OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"An EM generated identifier that identifies a particular alert."
::= { oraEM4AlertEntry 21 }
oraEM4Traps OBJECT IDENTIFIER ::= { oraEM4 2 }
oraEM4Alert TRAP-TYPE
ENTERPRISE oraEM4Traps
VARIABLES { oraEM4AlertTargetName, oraEM4AlertTargetType,
oraEM4AlertHostName, oraEM4AlertMetricName,
oraEM4AlertKeyName, oraEM4AlertKeyValue, oraEM4AlertTimeStamp,
oraEM4AlertSeverity, oraEM4AlertMessage,
oraEM4AlertRuleName, oraEM4AlertRuleOwner,
oraEM4AlertMetricValue, oraEM4AlertContext, oraEM4AlertCycleGuid,
oraEM4AlertRepeatCount,
oraEM4AlertUDTargetProperties, oraEM4AlertAck, oraEM4AlertAckBy,
oraEM4AlertNotifType, oraEM4AlertViolationGuid }
DESCRIPTION
"The variables included in the oraEM4Alert trap."
::= 1
oraEM4JobAlertTable OBJECT-TYPE
SYNTAX SEQUENCE OF OraEM4JobAlertEntry
ACCESS not-accessible
STATUS mandatory
DESCRIPTION
"Information on alerts generated by Oracle Enterprise Manager. This table is not queryable; it exists only to document the variables included in the oraEM4JobAlert trap. Each trap contains a single instance of each variable in the table."
::= { oraEM4Objects 2 }
oraEM4JobAlertEntry OBJECT-TYPE
SYNTAX OraEM4JobAlertEntry
ACCESS not-accessible
STATUS mandatory
DESCRIPTION
"Information about a particular Oracle Enterprise Manager alert."
INDEX { oraEM4JobAlertIndex }
::= { oraEM4JobAlertTable 1 }
OraEM4JobAlertEntry ::=
SEQUENCE {
oraEM4JobAlertIndex
INTEGER,
oraEM4JobAlertJobName
DisplayString,
oraEM4JobAlertJobOwner
DisplayString,
oraEM4JobAlertJobType
DisplayString,
oraEM4JobAlertJobStatus
DisplayString,
oraEM4JobAlertTargets
DisplayString,
oraEM4JobAlertTimeStamp
DisplayString,
oraEM4JobAlertRuleName
DisplayString,
oraEM4JobAlertRuleOwner
DisplayString,
oraEM4JobAlertMetricName
DisplayString,
oraEM4JobAlertMetricValue
DisplayString,
oraEM4JobAlertContext
DisplayString,
oraEM4JobAlertKeyName
DisplayString,
oraEM4JobAlertKeyValue
DisplayString,
oraEM4JobAlertSeverity
DisplayString,
oraEM4JobAlertJobId
DisplayString,
oraEM4JobAlertJobExecId
DisplayString
}
oraEM4JobAlertIndex OBJECT-TYPE
SYNTAX INTEGER (0..2147483647)
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Index of a particular alert, unique only at the moment an alert is generated."
::= { oraEM4JobAlertEntry 1 }
oraEM4JobAlertJobName OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the job to which this alert applies."
::= { oraEM4JobAlertEntry 2 }
oraEM4JobAlertJobOwner OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The owner of the job to which this alert applies."
::= { oraEM4JobAlertEntry 3 }
oraEM4JobAlertJobType OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The type of the job to which this alert applies."
::= { oraEM4JobAlertEntry 4 }
oraEM4JobAlertJobStatus OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The status of the job to which this alert applies."
::= { oraEM4JobAlertEntry 5 }
oraEM4JobAlertTargets OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"A comma separated list of target to which this alert applies."
::= { oraEM4JobAlertEntry 6 }
oraEM4JobAlertTimeStamp OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The time at which this job status changed causing this alert."
::= { oraEM4JobAlertEntry 7 }
oraEM4JobAlertRuleName OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the notification rule that caused this notification."
::= { oraEM4JobAlertEntry 8 }
oraEM4JobAlertRuleOwner OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The owner of the notification rule that caused this notification."
::= { oraEM4JobAlertEntry 9 }
oraEM4JobAlertMetricName OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the metric or policy which caused the Corrective Action to run that caused this alert."
::= { oraEM4JobAlertEntry 10 }
oraEM4JobAlertMetricValue OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The value of the metric which caused the Corrective Action to run that caused this alert."
::= { oraEM4JobAlertEntry 11 }
oraEM4JobAlertContext OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"A comma separated list of metric column names and values associated with the metric which caused the Corrective Action to run that caused this alert."
::= { oraEM4JobAlertEntry 12 }
oraEM4JobAlertKeyName OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the key-column, if present, for the metric which caused the Corrective Action to run that generated this alert."
::= { oraEM4JobAlertEntry 13 }
oraEM4JobAlertKeyValue OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The value of the key-column, if present, for the metric which caused the Corrective Action to run that generated this alert."
::= { oraEM4JobAlertEntry 14 }
oraEM4JobAlertSeverity OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The severity of the metric which caused the Corrective Action to run that generated this alert e.g. Critical."
::= { oraEM4JobAlertEntry 15 }
oraEM4JobAlertJobId OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The Job Id of the EM Job that triggered this notification."
::= { oraEM4JobAlertEntry 16 }
oraEM4JobAlertJobExecId OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The Job Execution Id of the EM Job that triggered this notification."
::= { oraEM4JobAlertEntry 17 }
oraEM4JobAlert TRAP-TYPE
ENTERPRISE oraEM4Traps
VARIABLES { oraEM4JobAlertJobName, oraEM4JobAlertJobOwner,
oraEM4JobAlertJobType, oraEM4JobAlertJobStatus,
oraEM4JobAlertTargets, oraEM4JobAlertTimeStamp,
oraEM4JobAlertRuleName, oraEM4JobAlertRuleOwner,
oraEM4JobAlertMetricName, oraEM4JobAlertMetricValue,
oraEM4JobAlertContext, oraEM4JobAlertKeyName,
oraEM4JobAlertKeyValue, oraEM4JobAlertSeverity,
oraEM4JobAlertJobId, oraEM4JobAlertJobExecId }
DESCRIPTION
"The variables included in the oraEM4JobAlert trap."
::= 2
oraEMNGObjects OBJECT IDENTIFIER ::= { oraEM4 3 }
oraEMNGEventTable OBJECT-TYPE
SYNTAX SEQUENCE OF OraEMNGEventEntry
ACCESS not-accessible
STATUS mandatory
DESCRIPTION
"Information on events published to Oracle Enterprise Manager. This table is not queryable; it exists only to document the variables included in the oraEMNGEventTrap trap. Each trap can contain a single instance of each variable in the table."
::= { oraEMNGObjects 1 }
oraEMNGEventEntry OBJECT-TYPE
SYNTAX OraEMNGEventEntry
ACCESS not-accessible
STATUS mandatory
DESCRIPTION
"Information about a particular Oracle Enterprise Manager event."
INDEX { oraEMNGEventIndex }
::= { oraEMNGEventTable 1 }
OraEMNGEventEntry ::=
SEQUENCE {
oraEMNGEventIndex
INTEGER,
oraEMNGEventNotifType
DisplayString,
oraEMNGEventMessage
DisplayString,
oraEMNGEventMessageURL
DisplayString,
oraEMNGEventSeverity
DisplayString,
oraEMNGEventSeverityCode
DisplayString,
oraEMNGEventRepeatCount
DisplayString,
oraEMNGEventActionMsg
DisplayString,
oraEMNGEventOccurrenceTime
DisplayString,
oraEMNGEventReportedTime
DisplayString,
oraEMNGEventCategories
DisplayString,
oraEMNGEventCategoryCodes
DisplayString,
oraEMNGEventType
DisplayString,
oraEMNGEventName
DisplayString,
oraEMNGAssocIncidentId
DisplayString,
oraEMNGAssocIncidentOwner
DisplayString,
oraEMNGAssocIncidentAcked
DisplayString,
oraEMNGAssocIncidentStatus
DisplayString,
oraEMNGAssocIncidentPriority
DisplayString,
oraEMNGAssocIncidentEscLevel
DisplayString,
oraEMNGEventTargetName
DisplayString,
oraEMNGEventTargetNameURL
DisplayString,
oraEMNGEventTargetType
DisplayString,
oraEMNGEventHostName
DisplayString,
oraEMNGEventTargetOwner
DisplayString,
oraEMNGEventTgtLifeCycleStatus
DisplayString,
oraEMNGEventTargetVersion
DisplayString,
oraEMNGEventUserDefinedTgtProp
DisplayString,
oraEMNGEventSourceObjName
DisplayString,
oraEMNGEventSourceObjNameURL
DisplayString,
oraEMNGEventSourceObjType
DisplayString,
oraEMNGEventSourceObjSubType
DisplayString,
oraEMNGEventSourceObjOwner
DisplayString,
oraEMNGEventCAJobName
DisplayString,
oraEMNGEventCAJobStatus
DisplayString,
oraEMNGEventCAJobOwner
DisplayString,
oraEMNGEventCAJobStepOutput
DisplayString,
oraEMNGEventCAJobType
DisplayString,
oraEMNGEventRuleSetName
DisplayString,
oraEMNGEventRuleName
DisplayString,
oraEMNGEventRuleOwner
DisplayString,
oraEMNGEventSequenceId
DisplayString,
oraEMNGEventRCADetails
DisplayString,
oraEMNGEventContextAttrs
DisplayString,
oraEMNGEventUserComments
DisplayString,
oraEMNGEventUpdates
DisplayString,
oraEMNGEventTotalOccurrenceCount
DisplayString,
oraEMNGEventCurrOccurrenceCount
DisplayString,
oraEMNGEventCurrFirstOccurDate
DisplayString,
oraEMNGEventCurrLastOccurDate
DisplayString,
oraEMNGEventRCAStatus
DisplayString,
oraEMNGEventTypeAttr1
DisplayString,
oraEMNGEventTypeAttr2
DisplayString,
oraEMNGEventTypeAttr3
DisplayString,
oraEMNGEventTypeAttr4
DisplayString,
oraEMNGEventTypeAttr5
DisplayString,
oraEMNGEventTypeAttr6
DisplayString,
oraEMNGEventTypeAttr7
DisplayString,
oraEMNGEventTypeAttr8
DisplayString,
oraEMNGEventTypeAttr9
DisplayString,
oraEMNGEventTypeAttr10
DisplayString,
oraEMNGEventTypeAttr11
DisplayString,
oraEMNGEventTypeAttr12
DisplayString,
oraEMNGEventTypeAttr13
DisplayString,
oraEMNGEventTypeAttr14
DisplayString,
oraEMNGEventTypeAttr15
DisplayString,
oraEMNGEventTypeAttr16
DisplayString,
oraEMNGEventTypeAttr17
DisplayString,
oraEMNGEventTypeAttr18
DisplayString,
oraEMNGEventTypeAttr19
DisplayString,
oraEMNGEventTypeAttr20
DisplayString,
oraEMNGEventTypeAttr21
DisplayString,
oraEMNGEventTypeAttr22
DisplayString,
oraEMNGEventTypeAttr23
DisplayString,
oraEMNGEventTypeAttr24
DisplayString,
oraEMNGEventTypeAttr25
DisplayString
}
oraEMNGEventIndex OBJECT-TYPE
SYNTAX INTEGER (0..2147483647)
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Index of a particular event, unique only at the moment an event is generated."
::= { oraEMNGEventEntry 1 }
oraEMNGEventNotifType OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Notification Type. NOTIF_NORMAL, NOTIF_RETRY, NOTIF_DURATION, NOTIF_REPEAT, NOTIF_CA, NOTIF_RCA"
::= { oraEMNGEventEntry 2 }
oraEMNGEventMessage OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The message associated with this event."
::= { oraEMNGEventEntry 3 }
oraEMNGEventMessageURL OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"EM Console URL for the event message. Populated for events with severity other than INFORMATIONAL. Empty if trap size exceeds configured snmp packet size."
::= { oraEMNGEventEntry 4 }
oraEMNGEventSeverity OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The severity of the event e.g. Fatal, Critical, Warning, Advisory, Information, Clear."
::= { oraEMNGEventEntry 5 }
oraEMNGEventSeverityCode OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Internal code of the severity: FATAL, CRITICAL, WARNING, ADVISORY, INFORMATIONAL, CLEAR."
::= { oraEMNGEventEntry 6 }
oraEMNGEventRepeatCount OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The repeat notification counter for the event."
::= { oraEMNGEventEntry 7 }
oraEMNGEventActionMsg OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The action message for this event."
::= { oraEMNGEventEntry 8 }
oraEMNGEventOccurrenceTime OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The time when this event occurred (optional), this is only populated for events that have occurrence time."
::= { oraEMNGEventEntry 9 }
oraEMNGEventReportedTime OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The time when this event was reported."
::= { oraEMNGEventEntry 10 }
oraEMNGEventCategories OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The list of categories to which this event belongs to. Empty if trap size exceeds configured snmp packet size."
::= { oraEMNGEventEntry 11 }
oraEMNGEventCategoryCodes OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The list of internal category codes to which this event belongs to. Empty if trap size exceeds configured snmp packet size."
::= { oraEMNGEventEntry 12 }
oraEMNGEventType OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the event type to which this event belongs to."
::= { oraEMNGEventEntry 13 }
oraEMNGEventName OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of this event."
::= { oraEMNGEventEntry 14 }
oraEMNGAssocIncidentId OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"ID of the associated incident with the event (optional)."
::= { oraEMNGEventEntry 15 }
oraEMNGAssocIncidentOwner OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Owner of the associated incident with the event (optional)."
::= { oraEMNGEventEntry 16 }
oraEMNGAssocIncidentAcked OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Acknowledged status of the associated incident with the event. 1 indicates acknowledged, 0 indicates unacknowledged."
::= { oraEMNGEventEntry 17 }
oraEMNGAssocIncidentStatus OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The status of the associated incident with the event."
::= { oraEMNGEventEntry 18 }
oraEMNGAssocIncidentPriority OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The proirity of the associated incident with the event."
::= { oraEMNGEventEntry 19 }
oraEMNGAssocIncidentEscLevel OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The Escalation Level of the associated incident with the event."
::= { oraEMNGEventEntry 20 }
oraEMNGEventTargetName OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the target to which this event applies. Populated for events that are about a target only."
::= { oraEMNGEventEntry 21 }
oraEMNGEventTargetNameURL OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"EM Console URL of the target to which this event applies. Populated for events that are about a target only. Empty if trap size exceeds configured snmp packet size."
::= { oraEMNGEventEntry 22 }
oraEMNGEventTargetType OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The type of the target to which this event applies. Populated for events that are about a target only."
::= { oraEMNGEventEntry 23 }
oraEMNGEventHostName OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the host on which this event originated. Populated for events that are about a target only."
::= { oraEMNGEventEntry 24 }
oraEMNGEventTargetOwner OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The primary administrator of the target on which this event originated. Empty if trap size exceeds configured snmp packet size."
::= { oraEMNGEventEntry 25 }
oraEMNGEventTgtLifeCycleStatus OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The life cycle status of the target on which this event originated."
::= { oraEMNGEventEntry 26 }
oraEMNGEventTargetVersion OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The version of the target on which this event originated."
::= { oraEMNGEventEntry 27 }
oraEMNGEventUserDefinedTgtProp OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The user defined target properties [name,value pair list] of the associated target with this event. Empty if trap size exceeds configured snmp packet size."
::= { oraEMNGEventEntry 28 }
oraEMNGEventSourceObjName OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the source object to which this event belongs to. Populated for events that are about a non-target object only, such as Job."
::= { oraEMNGEventEntry 29 }
oraEMNGEventSourceObjNameURL OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"EM Console URL for the source object to which this event belongs to. Empty if trap size exceeds configured snmp packet size."
::= { oraEMNGEventEntry 30 }
oraEMNGEventSourceObjType OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The type of the source object to which this event belongs to."
::= { oraEMNGEventEntry 31 }
oraEMNGEventSourceObjSubType OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The sub type of the source object to which this event belongs to (Optional property). Empty if trap size exceeds configured snmp packet size."
::= { oraEMNGEventEntry 32 }
oraEMNGEventSourceObjOwner OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The primary adminstrator of the source object to which this event belongs to. (Optional property). Empty if trap size exceeds configured snmp packet size."
::= { oraEMNGEventEntry 33 }
oraEMNGEventCAJobName OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The Name of the Corrective Action Job associated with this event."
::= { oraEMNGEventEntry 34 }
oraEMNGEventCAJobStatus OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The Status of the Corrective Action Job associated with this event."
::= { oraEMNGEventEntry 35 }
oraEMNGEventCAJobOwner OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The Owner of the Corrective Action Job associated with this event."
::= { oraEMNGEventEntry 36 }
oraEMNGEventCAJobStepOutput OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The job step output from the Corrective Action Job associated with this event."
::= { oraEMNGEventEntry 37 }
oraEMNGEventCAJobType OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The job type from the Corrective Action Job associated with this event."
::= { oraEMNGEventEntry 38 }
oraEMNGEventRuleSetName OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the ruleset that caused this notification. Empty if trap size exceeds configured snmp packet size."
::= { oraEMNGEventEntry 39 }
oraEMNGEventRuleName OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the rule within the ruleset that caused this notification."
::= { oraEMNGEventEntry 40 }
oraEMNGEventRuleOwner OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The owner of the ruleset that caused this notification."
::= { oraEMNGEventEntry 41 }
oraEMNGEventSequenceId OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"An EM generated identifier that uniquely identifies current issue until it is cleared."
::= { oraEMNGEventEntry 42 }
oraEMNGEventRCADetails OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Root Cause Analysis details associated with this event if it exists."
::= { oraEMNGEventEntry 43 }
oraEMNGEventContextAttrs OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The context attributes associated with this event. Empty if trap size exceeds configured snmp packet size."
::= { oraEMNGEventEntry 44 }
oraEMNGEventUserComments OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The user comments associated with this event. Empty if trap size exceeds configured snmp packet size."
::= { oraEMNGEventEntry 45 }
oraEMNGEventUpdates OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The updates associated with this event. Empty if trap size exceeds configured snmp packet size."
::= { oraEMNGEventEntry 46 }
oraEMNGEventTotalOccurrenceCount OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Total number of occurrences of the same event on a target across all open deduplicated events. This attribute applies only to deduplicated events."
::= { oraEMNGEventEntry 47 }
oraEMNGEventCurrOccurrenceCount OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Total occurrences of the event in this collection period. This attribute applies only to deduplicated events."
::= { oraEMNGEventEntry 48 }
oraEMNGEventCurrFirstOccurDate OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Timestamp when the event first occurred in this collection period. This attribute applies only to deduplicated events."
::= { oraEMNGEventEntry 49 }
oraEMNGEventCurrLastOccurDate OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Timestamp when the event last occurred in this collection period. This attribute applies only to deduplicated events."
::= { oraEMNGEventEntry 50 }
oraEMNGEventRCAStatus OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Summary of Root Cause Analysis, if applicable."
::= { oraEMNGEventEntry 51 }
oraEMNGEventTypeAttr1 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#1."
::= { oraEMNGEventEntry 61 }
oraEMNGEventTypeAttr2 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#2."
::= { oraEMNGEventEntry 62 }
oraEMNGEventTypeAttr3 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#3."
::= { oraEMNGEventEntry 63 }
oraEMNGEventTypeAttr4 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#4."
::= { oraEMNGEventEntry 64 }
oraEMNGEventTypeAttr5 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#5."
::= { oraEMNGEventEntry 65 }
oraEMNGEventTypeAttr6 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#6."
::= { oraEMNGEventEntry 66 }
oraEMNGEventTypeAttr7 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#7."
::= { oraEMNGEventEntry 67 }
oraEMNGEventTypeAttr8 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#8."
::= { oraEMNGEventEntry 68 }
oraEMNGEventTypeAttr9 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#9."
::= { oraEMNGEventEntry 69 }
oraEMNGEventTypeAttr10 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#10."
::= { oraEMNGEventEntry 70 }
oraEMNGEventTypeAttr11 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#11."
::= { oraEMNGEventEntry 71 }
oraEMNGEventTypeAttr12 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#12."
::= { oraEMNGEventEntry 72 }
oraEMNGEventTypeAttr13 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#13."
::= { oraEMNGEventEntry 73 }
oraEMNGEventTypeAttr14 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#14."
::= { oraEMNGEventEntry 74 }
oraEMNGEventTypeAttr15 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#15."
::= { oraEMNGEventEntry 75 }
oraEMNGEventTypeAttr16 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#16."
::= { oraEMNGEventEntry 76 }
oraEMNGEventTypeAttr17 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#17."
::= { oraEMNGEventEntry 77 }
oraEMNGEventTypeAttr18 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#18."
::= { oraEMNGEventEntry 78 }
oraEMNGEventTypeAttr19 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#19."
::= { oraEMNGEventEntry 79 }
oraEMNGEventTypeAttr20 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#20."
::= { oraEMNGEventEntry 80 }
oraEMNGEventTypeAttr21 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#21."
::= { oraEMNGEventEntry 81 }
oraEMNGEventTypeAttr22 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#22."
::= { oraEMNGEventEntry 82 }
oraEMNGEventTypeAttr23 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#23."
::= { oraEMNGEventEntry 83 }
oraEMNGEventTypeAttr24 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#24."
::= { oraEMNGEventEntry 84 }
oraEMNGEventTypeAttr25 OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Name and value pair as name=value for event type specific attribute#25."
::= { oraEMNGEventEntry 85 }
oraEMNGEvent TRAP-TYPE
ENTERPRISE oraEM4Traps
VARIABLES {
oraEMNGEventNotifType,
oraEMNGEventMessage, oraEMNGEventMessageURL,
oraEMNGEventSeverity, oraEMNGEventSeverityCode,
oraEMNGEventRepeatCount, oraEMNGEventActionMsg,
oraEMNGEventOccurrenceTime, oraEMNGEventReportedTime,
oraEMNGEventCategories, oraEMNGEventCategoryCodes,
oraEMNGEventType, oraEMNGEventName,
oraEMNGAssocIncidentId, oraEMNGAssocIncidentOwner,
oraEMNGAssocIncidentAcked, oraEMNGAssocIncidentStatus,
oraEMNGAssocIncidentPriority, oraEMNGAssocIncidentEscLevel,
oraEMNGEventTargetName, oraEMNGEventTargetNameURL,
oraEMNGEventTargetType, oraEMNGEventHostName,
oraEMNGEventTargetOwner, oraEMNGEventTgtLifeCycleStatus,
oraEMNGEventTargetVersion, oraEMNGEventUserDefinedTgtProp,
oraEMNGEventSourceObjName, oraEMNGEventSourceObjNameURL,
oraEMNGEventSourceObjType, oraEMNGEventSourceObjSubType,
oraEMNGEventSourceObjOwner, oraEMNGEventCAJobName,
oraEMNGEventCAJobStatus, oraEMNGEventCAJobOwner,
oraEMNGEventCAJobStepOutput, oraEMNGEventCAJobType,
oraEMNGEventRuleSetName, oraEMNGEventRuleName,
oraEMNGEventRuleOwner, oraEMNGEventSequenceId,
oraEMNGEventRCADetails, oraEMNGEventContextAttrs,
oraEMNGEventUserComments, oraEMNGEventUpdates,
oraEMNGEventTotalOccurrenceCount, oraEMNGEventCurrOccurrenceCount,
oraEMNGEventCurrFirstOccurDate, oraEMNGEventCurrLastOccurDate,
oraEMNGEventRCAStatus,
oraEMNGEventTypeAttr1, oraEMNGEventTypeAttr2,
oraEMNGEventTypeAttr3, oraEMNGEventTypeAttr4,
oraEMNGEventTypeAttr5, oraEMNGEventTypeAttr6,
oraEMNGEventTypeAttr7, oraEMNGEventTypeAttr8,
oraEMNGEventTypeAttr9, oraEMNGEventTypeAttr10,
oraEMNGEventTypeAttr11, oraEMNGEventTypeAttr12,
oraEMNGEventTypeAttr13, oraEMNGEventTypeAttr14,
oraEMNGEventTypeAttr15, oraEMNGEventTypeAttr16,
oraEMNGEventTypeAttr17, oraEMNGEventTypeAttr18,
oraEMNGEventTypeAttr19, oraEMNGEventTypeAttr20,
oraEMNGEventTypeAttr21, oraEMNGEventTypeAttr22,
oraEMNGEventTypeAttr23, oraEMNGEventTypeAttr24,
oraEMNGEventTypeAttr25
}
DESCRIPTION
"The variables included in the oraEMNGAlert trap."
::= 3
END
Re: Change FATAL condition to CRITICAL in trap
Let's take this one for example (imported from your MIB):
Looking at the trap you would most likely want to go off of the oraEM4JobAlertJobStatus since I assume that will send the information we want, you'll have to check your traps to see what type of value it sends, it's probably a string. Let's say for example it sends FATAL and GOOD into that variable, if you look at the number next to it we see it's variable 4.
So we would replace the exiting trap in /etc/snmp/snmptt.conf with this:
Then add another one like this:
Then restart snmptt and you should be good:
You'll have to do this each trap that you want to handle like this.
Code: Select all
EVENT oraEM4JobAlert .1.3.6.1.4.1.111.15.2.0.2 "Status Events" Normal
FORMAT The variables included in the oraEM4JobAlert trap. $*
EXEC /usr/local/bin/snmptraphandling.py "$r" "SNMP Traps" "$s" "$@" "$-*" "The variables included in the oraEM4JobAlert trap. $*"
SDESC
The variables included in the oraEM4JobAlert trap.
Variables:
1: oraEM4JobAlertJobName
2: oraEM4JobAlertJobOwner
3: oraEM4JobAlertJobType
4: oraEM4JobAlertJobStatus
5: oraEM4JobAlertTargets
6: oraEM4JobAlertTimeStamp
7: oraEM4JobAlertRuleName
8: oraEM4JobAlertRuleOwner
9: oraEM4JobAlertMetricName
10: oraEM4JobAlertMetricValue
11: oraEM4JobAlertContext
12: oraEM4JobAlertKeyName
13: oraEM4JobAlertKeyValue
14: oraEM4JobAlertSeverity
EDESCLooking at the trap you would most likely want to go off of the oraEM4JobAlertJobStatus since I assume that will send the information we want, you'll have to check your traps to see what type of value it sends, it's probably a string. Let's say for example it sends FATAL and GOOD into that variable, if you look at the number next to it we see it's variable 4.
So we would replace the exiting trap in /etc/snmp/snmptt.conf with this:
Code: Select all
EVENT oraEM4JobAlert .1.3.6.1.4.1.111.15.2.0.2 "Status Events" Normal
FORMAT The variables included in the oraEM4JobAlert trap. $*
EXEC /usr/local/bin/snmptraphandling.py "$r" "SNMP Traps" "$s" "$@" "$-*" "The variables included in the oraEM4JobAlert trap. $*"
MATCH $4: GOOD
SDESC
The variables included in the oraEM4JobAlert trap.
Variables:
1: oraEM4JobAlertJobName
2: oraEM4JobAlertJobOwner
3: oraEM4JobAlertJobType
4: oraEM4JobAlertJobStatus
5: oraEM4JobAlertTargets
6: oraEM4JobAlertTimeStamp
7: oraEM4JobAlertRuleName
8: oraEM4JobAlertRuleOwner
9: oraEM4JobAlertMetricName
10: oraEM4JobAlertMetricValue
11: oraEM4JobAlertContext
12: oraEM4JobAlertKeyName
13: oraEM4JobAlertKeyValue
14: oraEM4JobAlertSeverity
EDESCCode: Select all
EVENT oraEM4JobAlert .1.3.6.1.4.1.111.15.2.0.2 "Status Events" Critical
FORMAT The variables included in the oraEM4JobAlert trap. $*
EXEC /usr/local/bin/snmptraphandling.py "$r" "SNMP Traps" "$s" "$@" "$-*" "The variables included in the oraEM4JobAlert trap. $*"
MATCH $4: FATAL
SDESC
The variables included in the oraEM4JobAlert trap.
Variables:
1: oraEM4JobAlertJobName
2: oraEM4JobAlertJobOwner
3: oraEM4JobAlertJobType
4: oraEM4JobAlertJobStatus
5: oraEM4JobAlertTargets
6: oraEM4JobAlertTimeStamp
7: oraEM4JobAlertRuleName
8: oraEM4JobAlertRuleOwner
9: oraEM4JobAlertMetricName
10: oraEM4JobAlertMetricValue
11: oraEM4JobAlertContext
12: oraEM4JobAlertKeyName
13: oraEM4JobAlertKeyValue
14: oraEM4JobAlertSeverity
EDESCCode: Select all
service snmptt restart- snapon_admin
- Posts: 952
- Joined: Mon Jun 10, 2013 10:39 am
- Location: Kenosha, WI
- Contact:
Re: Change FATAL condition to CRITICAL in trap
I think it's actually the severity variable that sends that, so 14, but I'm picking up what you're putting down. I'll give that a shot and let you know how it goes, thanks.
Re: Change FATAL condition to CRITICAL in trap
Cool,
It might be, the traps will tell the tale.
- snapon_admin
- Posts: 952
- Joined: Mon Jun 10, 2013 10:39 am
- Location: Kenosha, WI
- Contact:
Re: Change FATAL condition to CRITICAL in trap
hmm, now the traps are being dumped into the snmpttunknown log file. Here's what I've got in snmptt.conf:
And my snmpttunknown.log:
Code: Select all
EVENT oraEM4Traps .1.3.6.1.4.1.111.15.2 "Status Events" Normal
FORMAT The variables included in the oraEM4Traps trap. $*
EXEC /usr/local/bin/snmptraphandling.py "$r" "SNMP Traps" "$s" "$@" "$-*" "$4 Status Event occurred on $23 at $9. $2 $Fn"
MATCH $4: CLEAR
MATCH $4: INFORMATION
This is a sample Event Message to test the SNMP notification delivery to the SNMP Manager. The contents of this messages are all sample data.
The variables included in the oraEM4Traps trap.
Variables:
1: oraEMNGEventNotifType
2: oraEMNGEventMessage
3: oraEMNGEventMessageURL
4: oraEMNGEventSeverity
5: oraEMNGEventSeverityCode
6: oraEMNGEventRepeatCount
7: oraEMNGEventActionMsg
8: oraEMNGEventOccurrenceTime
9: oraEMNGEventReportedTime
10: oraEMNGEventCategories
11: oraEMNGEventCategoryCodes
12: oraEMNGEventType
13: oraEMNGEventName
14: oraEMNGAssocIncidentId
15: oraEMNGAssocIncidentOwner
16: oraEMNGAssocIncidentAcked
17: oraEMNGAssocIncidentStatus
18: oraEMNGAssocIncidentPriority
19: oraEMNGAssocIncidentEscLevel
20: oraEMNGEventTargetName
21: oraEMNGEventTargetNameURL
22: oraEMNGEventTargetType
23: oraEMNGEventHostName
24: oraEMNGEventTargetOwner
25: oraEMNGEventTgtLifeCycleStatus
26: oraEMNGEventTargetVersion
27: oraEMNGEventUserDefinedTgtProp
28: oraEMNGEventSourceObjName
29: oraEMNGEventSourceObjNameURL
30: oraEMNGEventSourceObjType
31: oraEMNGEventSourceObjSubType
32: oraEMNGEventSourceObjOwner
33: oraEMNGEventCAJobName
34: oraEMNGEventCAJobStatus
35: oraEMNGEventCAJobOwner
36: oraEMNGEventCAJobStepOutput
37: oraEMNGEventCAJobType
38: oraEMNGEventRuleSetName
39: oraEMNGEventRuleName
40: oraEMNGEventRuleOwner
41: oraEMNGEventSequenceId
42: oraEMNGEventRCADetails
43: oraEMNGEventContextAttrs
44: oraEMNGEventUserComments
45: oraEMNGEventTypeAttr1
46: oraEMNGEventTypeAttr2
47: oraEMNGEventTypeAttr3
48: oraEMNGEventTypeAttr4
49: oraEMNGEventTypeAttr5
50: oraEMNGEventTypeAttr6
51: oraEMNGEventTypeAttr7
52: oraEMNGEventTypeAttr8
53: oraEMNGEventTypeAttr9
54: oraEMNGEventTypeAttr10
55: oraEMNGEventTypeAttr11
56: oraEMNGEventTypeAttr12
57: oraEMNGEventTypeAttr13
58: oraEMNGEventTypeAttr14
59: oraEMNGEventTypeAttr15
60: oraEMNGEventTypeAttr16
61: oraEMNGEventTypeAttr17
62: oraEMNGEventTypeAttr18
63: oraEMNGEventTypeAttr19
64: oraEMNGEventTypeAttr20
65: oraEMNGEventTypeAttr21
66: oraEMNGEventTypeAttr22
67: oraEMNGEventTypeAttr23
68: oraEMNGEventTypeAttr24
69: oraEMNGEventTypeAttr25
EDESC
#
#
#
EVENT oraEM4Traps .1.3.6.1.4.1.111.15.2 "Status Events" Warning
FORMAT The variables included in the oraEM4Traps trap. $*
EXEC /usr/local/bin/snmptraphandling.py "$r" "SNMP Traps" "$s" "$@" "$-*" "$4 Status Event occurred on $23 at $9. $2 $Fn"
MATCH $4: WARNING
This is a sample Event Message to test the SNMP notification delivery to the SNMP Manager. The contents of this messages are all sample data.
The variables included in the oraEM4Traps trap.
Variables:
1: oraEMNGEventNotifType
2: oraEMNGEventMessage
3: oraEMNGEventMessageURL
4: oraEMNGEventSeverity
5: oraEMNGEventSeverityCode
6: oraEMNGEventRepeatCount
7: oraEMNGEventActionMsg
8: oraEMNGEventOccurrenceTime
9: oraEMNGEventReportedTime
10: oraEMNGEventCategories
11: oraEMNGEventCategoryCodes
12: oraEMNGEventType
13: oraEMNGEventName
14: oraEMNGAssocIncidentId
15: oraEMNGAssocIncidentOwner
16: oraEMNGAssocIncidentAcked
17: oraEMNGAssocIncidentStatus
18: oraEMNGAssocIncidentPriority
19: oraEMNGAssocIncidentEscLevel
20: oraEMNGEventTargetName
21: oraEMNGEventTargetNameURL
22: oraEMNGEventTargetType
23: oraEMNGEventHostName
24: oraEMNGEventTargetOwner
25: oraEMNGEventTgtLifeCycleStatus
26: oraEMNGEventTargetVersion
27: oraEMNGEventUserDefinedTgtProp
28: oraEMNGEventSourceObjName
29: oraEMNGEventSourceObjNameURL
30: oraEMNGEventSourceObjType
31: oraEMNGEventSourceObjSubType
32: oraEMNGEventSourceObjOwner
33: oraEMNGEventCAJobName
34: oraEMNGEventCAJobStatus
35: oraEMNGEventCAJobOwner
36: oraEMNGEventCAJobStepOutput
37: oraEMNGEventCAJobType
38: oraEMNGEventRuleSetName
39: oraEMNGEventRuleName
40: oraEMNGEventRuleOwner
41: oraEMNGEventSequenceId
42: oraEMNGEventRCADetails
43: oraEMNGEventContextAttrs
44: oraEMNGEventUserComments
45: oraEMNGEventTypeAttr1
46: oraEMNGEventTypeAttr2
47: oraEMNGEventTypeAttr3
48: oraEMNGEventTypeAttr4
49: oraEMNGEventTypeAttr5
50: oraEMNGEventTypeAttr6
51: oraEMNGEventTypeAttr7
52: oraEMNGEventTypeAttr8
53: oraEMNGEventTypeAttr9
54: oraEMNGEventTypeAttr10
55: oraEMNGEventTypeAttr11
56: oraEMNGEventTypeAttr12
57: oraEMNGEventTypeAttr13
58: oraEMNGEventTypeAttr14
59: oraEMNGEventTypeAttr15
60: oraEMNGEventTypeAttr16
61: oraEMNGEventTypeAttr17
62: oraEMNGEventTypeAttr18
63: oraEMNGEventTypeAttr19
64: oraEMNGEventTypeAttr20
65: oraEMNGEventTypeAttr21
66: oraEMNGEventTypeAttr22
67: oraEMNGEventTypeAttr23
68: oraEMNGEventTypeAttr24
69: oraEMNGEventTypeAttr25
EDESC
#
#
#
EVENT oraEM4Traps .1.3.6.1.4.1.111.15.2 "Status Events" Critical
FORMAT The variables included in the oraEM4Traps trap. $*
EXEC /usr/local/bin/snmptraphandling.py "$r" "SNMP Traps" "$s" "$@" "$-*" "$4 Status Event occurred on $23 at $9. $2 $Fn"
MATCH $4: FATAL
MATCH $4: CRITICAL
This is a sample Event Message to test the SNMP notification delivery to the SNMP Manager. The contents of this messages are all sample data.
The variables included in the oraEM4Traps trap.
Variables:
1: oraEMNGEventNotifType
2: oraEMNGEventMessage
3: oraEMNGEventMessageURL
4: oraEMNGEventSeverity
5: oraEMNGEventSeverityCode
6: oraEMNGEventRepeatCount
7: oraEMNGEventActionMsg
8: oraEMNGEventOccurrenceTime
9: oraEMNGEventReportedTime
10: oraEMNGEventCategories
11: oraEMNGEventCategoryCodes
12: oraEMNGEventType
13: oraEMNGEventName
14: oraEMNGAssocIncidentId
15: oraEMNGAssocIncidentOwner
16: oraEMNGAssocIncidentAcked
17: oraEMNGAssocIncidentStatus
18: oraEMNGAssocIncidentPriority
19: oraEMNGAssocIncidentEscLevel
20: oraEMNGEventTargetName
21: oraEMNGEventTargetNameURL
22: oraEMNGEventTargetType
23: oraEMNGEventHostName
24: oraEMNGEventTargetOwner
25: oraEMNGEventTgtLifeCycleStatus
26: oraEMNGEventTargetVersion
27: oraEMNGEventUserDefinedTgtProp
28: oraEMNGEventSourceObjName
29: oraEMNGEventSourceObjNameURL
30: oraEMNGEventSourceObjType
31: oraEMNGEventSourceObjSubType
32: oraEMNGEventSourceObjOwner
33: oraEMNGEventCAJobName
34: oraEMNGEventCAJobStatus
35: oraEMNGEventCAJobOwner
36: oraEMNGEventCAJobStepOutput
37: oraEMNGEventCAJobType
38: oraEMNGEventRuleSetName
39: oraEMNGEventRuleName
40: oraEMNGEventRuleOwner
41: oraEMNGEventSequenceId
42: oraEMNGEventRCADetails
43: oraEMNGEventContextAttrs
44: oraEMNGEventUserComments
45: oraEMNGEventTypeAttr1
46: oraEMNGEventTypeAttr2
47: oraEMNGEventTypeAttr3
48: oraEMNGEventTypeAttr4
49: oraEMNGEventTypeAttr5
50: oraEMNGEventTypeAttr6
51: oraEMNGEventTypeAttr7
52: oraEMNGEventTypeAttr8
53: oraEMNGEventTypeAttr9
54: oraEMNGEventTypeAttr10
55: oraEMNGEventTypeAttr11
56: oraEMNGEventTypeAttr12
57: oraEMNGEventTypeAttr13
58: oraEMNGEventTypeAttr14
59: oraEMNGEventTypeAttr15
60: oraEMNGEventTypeAttr16
61: oraEMNGEventTypeAttr17
62: oraEMNGEventTypeAttr18
63: oraEMNGEventTypeAttr19
64: oraEMNGEventTypeAttr20
65: oraEMNGEventTypeAttr21
66: oraEMNGEventTypeAttr22
67: oraEMNGEventTypeAttr23
68: oraEMNGEventTypeAttr24
69: oraEMNGEventTypeAttr25
EDESCCode: Select all
Tue Jul 28 13:40:15 2015: Unknown trap (.1.3.6.1.4.1.111.15.2) received from lisgrid01p at:
Value 0: lisgrid01p
Ent Value 2: .1.3.6.1.4.1.111.15.3.1.1.4.1=https://lisgrid01p.snapon.com:7799/em/redirect?pageType=sdk-core-event-console-detailEvent&issueID=1AC3FC17974327E0E054020820F4DF2F
Ent Value 20: .1.3.6.1.4.1.111.15.3.1.1.22.1=https://lisgrid01p.snapon.com:7799/em/redirect?pageType=TARGET_HOMEPAGE&targetName=tflashdb.snapon.com&targetType=oracle_database
Tue Jul 28 13:43:25 2015: Unknown trap (.1.3.6.1.4.1.111.15.2) received from lisgrid01p at:
Value 0: lisgrid01p
Ent Value 2: .1.3.6.1.4.1.111.15.3.1.1.4.1=https://lisgrid01p.snapon.com:7799/em/redirect?pageType=sdk-core-event-console-detailEvent&issueID=1AC889A848844C21E054020820F4DF2F
Ent Value 20: .1.3.6.1.4.1.111.15.3.1.1.22.1=https://lisgrid01p.snapon.com:7799/em/redirect?pageType=TARGET_HOMEPAGE&targetName=tflashdb.snapon.com&targetType=oracle_database
Tue Jul 28 13:46:09 2015: Unknown trap (.1.3.6.1.4.1.111.15.2) received from lisgrid01p at:
Value 0: lisgrid01p
Ent Value 2: .1.3.6.1.4.1.111.15.3.1.1.4.1=https://lisgrid01p.snapon.com:7799/em/redirect?pageType=sdk-core-event-console-detailEvent&issueID=1AC3FD294FDC27CCE054020820F4DF2F
Ent Value 20: .1.3.6.1.4.1.111.15.3.1.1.22.1=https://lisgrid01p.snapon.com:7799/em/redirect?pageType=TARGET_HOMEPAGE&targetName=LISTENER_KDBLAB01_kenrman01t.snapon.com&targetType=oracle_listener
Tue Jul 28 13:51:09 2015: Unknown trap (.1.3.6.1.4.1.111.15.2) received from lisgrid01p at:
Value 0: lisgrid01p
Ent Value 2: .1.3.6.1.4.1.111.15.3.1.1.4.1=https://lisgrid01p.snapon.com:7799/em/redirect?pageType=sdk-core-event-console-detailEvent&issueID=1AC3FD294FDC27CCE054020820F4DF2F
Ent Value 20: .1.3.6.1.4.1.111.15.3.1.1.22.1=https://lisgrid01p.snapon.com:7799/em/redirect?pageType=TARGET_HOMEPAGE&targetName=LISTENER_KDBLAB01_kenrman01t.snapon.com&targetType=oracle_listener
Tue Jul 28 14:03:02 2015: Unknown trap (.1.3.6.1.4.1.111.15.2) received from lisgrid01p at:
Value 0: lisgrid01p
Ent Value 2: .1.3.6.1.4.1.111.15.3.1.1.4.1=https://lisgrid01p.snapon.com:7799/em/redirect?pageType=sdk-core-event-console-detailEvent&issueID=1AC3FC17957527C9E054020820F4DF2F
Ent Value 20: .1.3.6.1.4.1.111.15.3.1.1.22.1=https://lisgrid01p.snapon.com:7799/em/redirect?pageType=TARGET_HOMEPAGE&targetName=kdblab01.snapon.com&targetType=oracle_database
Tue Jul 28 14:03:02 2015: Unknown trap (.1.3.6.1.4.1.111.15.2) received from lisgrid01p at:
Value 0: lisgrid01p
Ent Value 2: .1.3.6.1.4.1.111.15.3.1.1.4.1=https://lisgrid01p.snapon.com:7799/em/redirect?pageType=sdk-core-event-console-detailEvent&issueID=1AC3FC17956F27C9E054020820F4DF2FRe: Change FATAL condition to CRITICAL in trap
What does your /var/log/messages show for that trap? It doesn't look like it's including that var.
- Box293
- Too Basu
- Posts: 5126
- Joined: Sun Feb 07, 2010 10:55 pm
- Location: Deniliquin, Australia
- Contact:
Re: Change FATAL condition to CRITICAL in trap
Can you do the following:
Now go and send the trap from the sending device.
This will be spooled into a file in /var/spool/snmptt/
Get a copy of this file and upload it here
Then:
Code: Select all
service stop snmpttThis will be spooled into a file in /var/spool/snmptt/
Get a copy of this file and upload it here
Then:
Code: Select all
service start snmpttAs of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.